workaround gcc-4 assembly constraint bug
by Toshio Kuratomi
I've been working on getting the ocaml extras package compiled on devel:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=156238
There appears to be a bug in gcc4's inline assembly constraints:
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=21291
that's keeping the compiler from selecting memory when we run out of
registers. Here's the affected ocaml code from:
ocaml-3.08.3/otherlibs/num/bng_ia32.c:bngdigit bng_ia32_mult_sub_digit:
asm("1: \n\t"
"movl (%1), %%eax \n\t"
"movl (%0), %4 \n\t"
"mull %5\n\t" /* edx:eax = d * next digit of b */
"subl %%eax, %4 \n\t" /* subtract eax from next digit of a */
"adcl $0, %%edx \n\t" /* accumulate carry in edx */
"subl %3, %4 \n\t" /* subtract out */
"adcl $0, %%edx \n\t" /* accumulate carry in edx */
"movl %4, (%0) \n\t" /* store next digit of result */
"movl %%edx, %3 \n\t" /* edx is next out */
"leal 4(%0), %0 \n\t"
"leal 4(%1), %1 \n\t"
"decl %2 \n\t"
"jnz 1b"
: "+&r" (a), "+&r" (b), "+&rm" (blen), "+&rm" (out), "=&r" (tmp)
: "rm" (d)
: "eax", "edx");
I think that the solution should be to change the constraints to specify
memory only rather than a register with memory fallback:
: "+&r" (a), "+&r" (b), "+m" (blen), "+m" (out), "=&r" (tmp)
: "rm" (d)
: "eax", "edx");
I'm not too familiar with gcc's constraints, though. Would anyone with
a bit more experience be willing to tell me if that looks right or not?
Thanks,
Toshio
--
toshio \ 25th March, 1999: Cold rain in Georgia. Blustery blowing wind.
@tiki \ Freezing fingers and tired body. Hiking on because the shelters
-lounge \ are filled with other hikers.
.com \__________Life is miserable -- Life is grand!_______ GA->ME 1999
18 years, 11 months
rawhide report: 20050519 changes
by Build System
Updated Packages:
alsa-lib-1.0.9rc2-5
-------------------
* Wed May 18 2005 Martin Stransky <stransky(a)redhat.com> 1.0.9rc2-5
- fix for #130593
- new ainit (dmix/dsnoop is default only for cards which really need it)
- fix dsnoop
- add fix for mixer (from https://bugs.gentoo.org/attachment.cgi?id=58918)
audit-0.8.1-1
-------------
* Tue May 17 2005 Steve Grubb <sgrubb(a)redhat.com> 0.8.1-1
- Fix code to "or" uid & gid checks for ausearch -ua & -ga
- Change msg() to audit_msg() to avoid conflicts
- Parse socket messages for hostname in ausearch
* Thu May 12 2005 Steve Grubb <sgrubb(a)redhat.com> 0.8-1
- ausearch fix bugs related to -f & -x
- Parse messages using new types
- Properly unescape filenames
- Update interface for sending userspace messages to use more types
beecrypt-4.1.2-8
----------------
* Tue May 17 2005 Miloslav Trmac <mitr(a)redhat.com> - 4.1.2-8
- Remove dependencies on private symbols not present in Python 2.4 from
beecrypt-python
* Tue May 17 2005 Miloslav Trmac <mitr(a)redhat.com> - 4.1.2-7
- Doh, actually apply the patch
* Tue May 17 2005 Miloslav Trmac <mitr(a)redhat.com> - 4.1.2-6
- Fix b64encode() for data starting with NUL (#123650)
bind-24:9.3.1-4
---------------
* Sat Apr 16 2005 Jason Vas Dias <jvdias(a)redhat.com> - 24:9.2.1-4
- Fix bug 157601: give named.init a configtest function
- Fix bug 156797: named.init should check SELinux booleans.local before booleans
- Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
- Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
BIND quirks and SELinux DDNS / slave zone file configuration
- D-BUS patches NOT applied until dhcdbd is in FC
* Fri Apr 15 2005 Jason Vas Dias <jvdias(a)redhat.com> - 24:9.3.1-4_dbus
- Enhancement to allow dynamic forwarder table management and
- DHCP forwarder auto-configuration with D-BUS
cman-1.0-0.pre33.15
-------------------
* Tue May 17 2005 Chris Feist <cfeist(a)redhat.com>
- Require cman-kernel-modules.
* Thu May 05 2005 Chris Feist <cfeist(a)redhat.com>
- Added patch to disable starting up the init scripts.
* Mon Dec 20 2004 Chris Feist <cfeist(a)redhat.com>
- Rebuild with new sources.
cman-kernel-2.6.11.4-20050517.141233.FC4.3
------------------------------------------
* Wed May 18 2005 Chris Feist <cfeist(a)redhat.com>
- Fixed xen building with ARCH=xen & providing cman-kernel-modules.
device-mapper-1.01.02-1.0
-------------------------
* Tue May 17 2005 Alasdair Kergon <agk(a)redhat.com> - 1.01.02-1.0
- Add --exec and --target to dmsetup for initrd convenience.
- Automatically call dm_lib_exit when exiting.
* Tue Mar 29 2005 Alasdair Kergon <agk(a)redhat.com> - 1.01.01-1.0
- Update dmsetup man page.
- Replicate devmap_name output with dmsetup info -c --noheadings -o name.
* Fri Mar 04 2005 Alasdair Kergon <agk(a)redhat.com> - 1.01.00-1.1
- Rebuild requested for gcc update.
dlm-1.0-0.pre21.10
------------------
* Tue May 17 2005 Chris Feist <cfeist(a)redhat.com>
- Requires dlm-kernel-modules.
* Sun May 08 2005 Florian La Roche <laroche(a)redhat.com>
- fix -devel requires
* Fri May 06 2005 Chris Feist <cfeist(a)redhat.com>
- Cleaned up .spec file.
dlm-kernel-2.6.11.4-20050517.141233.FC4.2
-----------------------------------------
* Tue May 17 2005 Chris Feist <cfeist(a)redhat.com>
- Provide dlm-kernel-modules & ARCH=xen on xen makes.
eclipse-1:3.1.0_fc-0.M6.19
--------------------------
* Tue May 17 2005 Andrew Overholt <overholt(a)redhat.com> 3.1.0_fc-0.M6.19
- Add Epoch on eclipse-platform.
- Use %{_bindir} in post and postun scripts.
emacs-21.4-5
------------
* Wed May 18 2005 Jens Petersen <petersen(a)redhat.com> - 21.4-5
- update cc-mode to 5.30.9 stable release to address font-lock problems
(126165,148977,150197,155292,158044)
* Mon May 16 2005 Jens Petersen <petersen(a)redhat.com> - 21.4-4
- don't accidently exclude emacsclient from common package
(Jonathan Kamens, #157808)
- traditional Chinese desktop file translation (Wei-Lun Chao, #157287)
* Wed Apr 20 2005 Jens Petersen <petersen(a)redhat.com> - 21.4-3
- add igrep.el and init file
evolution-connector-2.2.2-5
---------------------------
* Wed May 18 2005 David Malcolm <dmalcolm(a)redhat.com> - 2.2.2-5
- add Aaron Gaudio's patch to fix PDA syncronization (#139393)
* Tue May 17 2005 David Malcolm <dmalcolm(a)redhat.com> - 2.2.2-4
- Install the debug utilities from the "lib" subdirectory; renumber patches
accordingly; regenerate the generated patch
evolution-data-server-1.2.2-3
-----------------------------
* Wed May 18 2005 David Malcolm <dmalcolm(a)redhat.com> - 1.2.2-3
- bumped libsoup requirement to 2.2.3; removed mozilla_build_version, using
pkg-config instead for locating NSPRS and NSS headers/libraries (#158085)
gail-1.8.3-2
------------
* Wed May 18 2005 Matthias Clasen <mclasen(a)redhat.com> 1.8.3-2
- Fix the tamil translations
gnbd-1.0-0.pre14.6
------------------
* Tue May 17 2005 Chris Feist <cfeist(a)redhat.com>
- Require cman-kernel-modules.
* Fri May 06 2005 Chris Feist <cfeist(a)redhat.com>
- Cleanup .spec file, don't glob /usr/share/man.
* Mon Dec 20 2004 Chris Feist <cfeist(a)redhat.com>
- Rebuild with new sources.
gnbd-kernel-2.6.11.2-20050420.133124.FC4.25
-------------------------------------------
* Tue May 17 2005 Chris Feist <cfeist(a)redhat.com>
- Provides gnbd-kernel-modules & added ARCH=xen to build.
gnome-libs-1:1.4.1.2.90-46
--------------------------
* Thu May 12 2005 Ray Strode <rstrode(a)redhat.com> - 1:1.4.1.2.90-46
- add UTF-8 encoded ta.po (bug #135349)
- make compile
gnome-media-2.10.2-2
--------------------
* Tue May 17 2005 John (J5) Palmieri <johnp(a)redhat.com> 2.10.2-2
- remove gnome-sound-recorder because it hasn't worked for some time
gnome-utils-1:2.10.0-3
----------------------
* Tue May 17 2005 Ray Strode <rstrode(a)redhat.com> 1:2.10.0-3
- call more autofoo to allow recompilation on x86_64 (bug 150627)
gnu-crypto-0:2.0.1-1jpp_4fc
---------------------------
* Mon May 16 2005 Thomas Fitzsimmons <fitzsim(a)redhat.com> - 0:2.0.1-1jpp_4fc
- Require jpackage-utils for post and postun.
- Run rebuild-security-providers with full path.
httpd-2.0.54-9
--------------
* Wed May 18 2005 Joe Orton <jorton(a)redhat.com> 2.0.54-9
- add piped logger fixes (w/Jeff Trawick)
hwbrowser-0.21-1
----------------
* Wed May 18 2005 Nils Philippsen <nphilipp(a)redhat.com> 0.21
- use True, False instead of gtk.TRUE, gtk.FALSE
- set window manager icon (#155866)
java-1.4.2-gcj-compat-0:1.4.2.0-11jpp
-------------------------------------
* Thu Oct 07 2004 Gary Benson <gbenson(a)redhat.com> 0:1.4.2.0-11jpp
- Don't override $CLASSPATH when we add ecj.jar in javac.
* Wed Oct 06 2004 Thomas Fitzsimmons <fitzsim(a)redhat.com> 0:1.4.2.0-10jpp
- Bump gcc version. (Fix #133898)
* Fri Oct 01 2004 Thomas Fitzsimmons <fitzsim(a)redhat.com> 0:1.4.2.0-9jpp
- Change /usr/lib/jvm directory to java-1.4.2-gcj from
java-1.4.2-gcj-compat.
java-1.4.2-gcj-compat-0:1.4.2.0-40jpp_22rh
------------------------------------------
* Wed May 18 2005 Thomas Fitzsimmons <fitzsim(a)redhat.com> - 0:1.4.2.0-40jpp_22rh
- Move gcc-java requirement from base to -devel.
* Wed May 18 2005 Thomas Fitzsimmons <fitzsim(a)redhat.com> - 0:1.4.2.0-40jpp_21rh
- Comment out bouncy castle stuff.
* Tue May 17 2005 Thomas Fitzsimmons <fitzsim(a)redhat.com> - 0:1.4.2.0-40jpp_20rh
- Require jpackage-utils for post and postun.
- Run rebuild-security-providers with full path.
kernel-2.6.11-1.1319_FC4
------------------------
* Wed May 18 2005 Dave Jones <davej(a)redhat.com>
- Fix up some warnings in the IDE patches.
- 2.6.12-rc4-git2
* Tue May 17 2005 Dave Jones <davej(a)redhat.com>
- 2.6.12-rc4-git1
ARM, ioctl security fixes, mmc driver update,
ibm_emac & tulip netdriver fixes, serial updates
ELF loader security fix.
kudzu-1.1.116.2-1
-----------------
* Wed May 18 2005 Bill Nottingham <notting(a)redhat.com> 1.1.116.2-1
- tweak synaptics detection for ALPS (#158062, <pnasrat(a)redhat.com>)
mkinitrd-4.2.15-1
-----------------
* Tue May 17 2005 Peter Jones <pjones(a)redhat.com> - 4.2.15-1
- Better init argument handling (don't mess up with serial console)
perl-3:5.8.6-15
---------------
* Wed May 18 2005 Warren Togami <wtogami(a)redhat.com> - 3:5.8.6-15
- remove unused /tmp/MANIFEST.all (#151801)
* Tue May 17 2005 Warren Togami <wtogami(a)redhat.com> - 3:5.8.6-14
- CGI.pm 3.10 fixes mod_perl problems (#158036)
* Sun May 15 2005 Warren Togami <wtogami(a)redhat.com> - 3:5.8.6-13
- Better patch for FindBin.pm (#127023#c37)
qt-1:3.3.4-14
-------------
* Wed May 18 2005 Than Ngo <than(a)redhat.com> 1:3.3.4-14
- apply patch to use ecvt, fcvt (thanks to Jakub)
- fix a bug in printing of postscript #156977
* Wed May 18 2005 Than Ngo <than(a)redhat.com> 1:3.3.4-13
- rebuild
rsync-2.6.4-3
-------------
* Tue May 17 2005 Jay Fenlason <fenlason(a)redhat.com> 2.6.4-3
- Include the -address patch from upstream, to close
bz#154752 Unable to use --address in client mode
spamassassin-3.0.3-4.fc4
------------------------
* Tue May 17 2005 Warren Togami <wtogami(a)redhat.com> - 3.0.3-4
- allow user-level disabling of subject rewriting pref (#147464)
system-config-securitylevel-1.5.8-1
-----------------------------------
* Wed May 18 2005 Chris Lumens <clumens(a)redhat.com> 1.5.8-1
- Revert .desktop file changes since they weren't properly marked for
translation.
system-config-soundcard-1.2.11-3
--------------------------------
* Wed May 18 2005 Martin Stransky <stransky(a)redhat.com> 1.2.11-3
- fixed #158064
totem-1.0.2-1
-------------
* Tue May 17 2005 John (J5) Palmieri <johnp(a)redhat.com> - 1.0.2-1
- Update to upstream version 1.0.2 to fix minor bugs
- Register the thumbnail and handlers schemas
18 years, 11 months
PPC and RS/6000 (PReP)
by Ricardo Ariel Gorosito
Hi,
will RS/6000 be supported in FC4? rawhide's changelog from 20050514 say
"Enable CONFIG_ISA on ppc32 to make the RS/6000 user happy" in kernel
package and AFAIK anaconda has some support for PReP machines (changelog
in anaconda 2005-Apr-26 talk about PReP in iSeries).
I have downloades FC4T3 and when I try to boot 1st CD, the host freeze
and in led display show F4D ('Bit-map file read into memory, start
processing')
CD1/images/README say "Images for installing on an iSeries machine can
be found in the ppc/iSeries directory." but ppc/iSeries does not exist
I'm testing with RS/6000 7043-240 (UP) processor is ppc604e (pSeries
PReP, not CHRP). It is running linux today.
R.-
18 years, 11 months
rawhide report: 20050518 changes
by Build System
Updated Packages:
GFS-kernel-2.6.11.6-20050517.141233.FC4.0
-----------------------------------------
* Mon May 16 2005 Chris Feist <cfeist(a)redhat.com>
- Add depmod in %post scriplet.
anaconda-10.1.0.2-1
-------------------
* Thu Oct 28 2004 Jeremy Katz <katzj(a)redhat.com> - 10.1.0.2-1
- Bring in firefox on upgrade if mozilla/netscape were
previously installed (#137244)
* Wed Oct 27 2004 Jeremy Katz <katzj(a)redhat.com> - 10.1.0.1-1
- Punjabi shouldn't try to do text mode (#137030)
- Fix traceback on upgrade (#137345)
* Wed Oct 20 2004 Jeremy Katz <katzj(a)redhat.com> - 10.1.0.0-1
- Lowercase OSA addresses from a parm file too (karsten)
- Turn off beta nag for FC3 release
anaconda-10.2.0.63-1
--------------------
* Tue May 17 2005 Jeremy Katz <katzj(a)redhat.com> - 10.2.0.63-1
- add arch to buildstamp (notting, #151927)
- Fix am.po format strings
* Tue May 17 2005 Jeremy Katz <katzj(a)redhat.com> - 10.2.0.62-1
- Fix execcon used for anaconda (pjones)
- Fix traceback on tui netstg2.img install (#157709)
- Fix various splittree bugs (clumens, #157722, #157721, #157723)
- Blacklist perl.i386 on x86_64 to be removed on upgrade (pnasrat, #156658)
- Fix drive sorting (clumens)
- Remove %installclass support for kickstart since it's never worked (#149690)
- Fix name.arch in packages (pnasrat)
- Remove bogus pre-existing RAID info on kickstart installs (clumens, #88359)
- Pretend to have nano in the rescue environment
- Don't load stage2.img into RAM for rescue mode if booted
with 'linux text' (#155398)
apr-0.9.6-3
-----------
* Tue May 17 2005 Joe Orton <jorton(a)redhat.com> 0.9.6-3
- fix apr_procattr_child_*_set error handling
* Tue Mar 01 2005 Joe Orton <jorton(a)redhat.com> 0.9.6-2
- have apr-devel depend on specific version of gcc
- add NOTICE to docdir
* Wed Feb 09 2005 Joe Orton <jorton(a)redhat.com> 0.9.6-1
- update to 0.9.6
cman-kernel-2.6.11.4-20050517.141233.FC4.0
------------------------------------------
* Mon May 16 2005 Chris Feist <cfeist(a)redhat.com>
- Add depmod in %post scriptlet.
coreutils-5.2.1-45
------------------
* Mon May 16 2005 Tim Waugh <twaugh(a)redhat.com> 5.2.1-45
- Applied Russell Coker's selinux changes (bug #157856).
* Fri Apr 08 2005 Tim Waugh <twaugh(a)redhat.com>
- Fixed pam patch from Steve Grubb (bug #154946).
- Use better upstream patch for "stale utmp".
cpio-2.6-7
----------
* Tue May 17 2005 Peter Vrabec <pvrabec(a)redhat.com> 2.6-7
- fix #156314 (CAN-2005-1229) cpio directory traversal issue
- fix some gcc warnings
dlm-kernel-2.6.11.4-20050517.141233.FC4.0
-----------------------------------------
* Mon May 16 2005 Chris Feist <cfeist(a)redhat.com>
- Add depmod in %post scriplet.
eclipse-1:3.1.0_fc-0.M6.18
--------------------------
* Tue May 17 2005 Ben Konrath <bkonrath(a)redhat.com> 3.1.0_fc-0.M6.18
- Add Epoch to jsch requires.
* Mon May 16 2005 Ben Konrath <bkonrath(a)redhat.com> 3.1.0_fc-0.M6.17
- Update libswt-mozilla patches and require mozilla 1.7.8.
* Fri May 13 2005 Andrew Overholt <overholt(a)redhat.com>
- Use %{ix86} macro in ExclusiveArch rather than i386 (jorton).
elinks-0.10.3-3
---------------
* Tue May 17 2005 Karel Zak <kzak(a)redhat.com> 0.10.3-3
- fix #157300 - Strange behavior on ppc64 (patch by Miloslav Trmac)
emacs-21.4-4
------------
* Mon Apr 25 2005 Jens Petersen <petersen(a)redhat.com> - 21.4-4
- don't accidently exclude emacsclient from common package
(Jonathan Kamens, #157808)
- traditional Chinese desktop file translation (Wei-Lun Chao, #157287)
fonts-indic-1.10-2
------------------
* Tue May 17 2005 Leon Ho <llch(a)redhat.com> 1.10-2
- fix Requires: fontconfig (#151771)
* Mon May 16 2005 Leon Ho <llch(a)redhat.com> 1.10-1
- New punjabi fonts to fix RH#151630
gcc-4.0.0-6
-----------
* Tue May 17 2005 Jakub Jelinek <jakub(a)redhat.com> 4.0.0-6
- update from CVS
- PRs target/18655, bootstrap/21230, fortran/17143, fortran/17432,
java/21519, libfortran/21324, libgcj/20504, libgcj/21557,
libgcj/21606, libstdc++/21526, middle-end/21237, target/21551,
target/21556, tree-optimization/21532
- fixed WHERE inside FORALL (PR fortran/15080)
- fix a tree sharing bug (#157792, PR tree-optimization/21610)
- avoid using hash tables recursively (#157308)
- fix ppc64 libgcj (Andrew Haley, #154684, #142611)
gdm-1:2.6.0.8-14
----------------
* Thu May 12 2005 Ray Strode <rstrode(a)redhat.com> 1:2.6.0.8-14
- Fix processing of new-line characters that got broken
in 2.6.0.8-11 (bug 157442).
gnbd-kernel-2.6.11.2-20050420.133124.FC4.23
-------------------------------------------
* Mon May 16 2005 Chris Feist <cfeist(a)redhat.com>
- Add depmod in %post scriplet.
gphoto2-2.1.5-9
---------------
* Sat May 14 2005 Tim Waugh <twaugh(a)redhat.com> 2.1.5-9
- Fixed buffer overrun in ricoh/g3 (bug #157739).
gthumb-2.6.5-1
--------------
* Mon May 16 2005 John (J5) Palmieri <johnp(a)redhat.com> - 2.6.5-1
- Minor updated that fixes a couple of bugs and adds some translations
jessie-0:1.0.0-7
----------------
* Mon May 16 2005 Thomas Fitzsimmons <fitzsim(a)redhat.com> - 0:1.0.0-7
- Require jpackage-utils for post and postun.
- Run rebuild-security-providers with full path.
kbd-1.12-9
----------
* Tue May 17 2005 Miloslav Trmac <mitr(a)redhat.com> - 1.12-9
- Fix another violation of C aliasing rules (#157720, patch by Jan Kratochvil)
kernel-2.6.11-1.1315_FC4
------------------------
* Mon May 16 2005 Rik van Riel <riel(a)redhat.com>
- enable Xen again (not tested yet)
- fix a typo in the EXPORT_SYMBOL patch
libsepol-1.5.9-2
----------------
* Tue May 17 2005 Dan Walsh <dwalsh(a)redhat.com> 1.5.9-2
- Upgrade to latest from NSA
* Added sepol_genbools_policydb and sepol_genusers_policydb for
audit2why.
* Mon May 16 2005 Dan Walsh <dwalsh(a)redhat.com> 1.5.8-2
- export sepol_context_to_sid
netpbm-10.27-3
--------------
* Mon May 16 2005 Jindrich Novy <jnovy(a)redhat.com> 10.27-3
- fix ppmdither leak caused by bug in security patch (#157757)
- drop gcc34 patch
perl-3:5.8.6-13
---------------
* Sun May 15 2005 Warren Togami <wtogami(a)redhat.com> - 3:5.8.6-13
- Better patch for FindBin.pm (#127023#c37)
* Sat May 14 2005 Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-12
- New findbin-selinux patch: it now passes the FindBin.t tests
(patch28 replaces patch23). #118877 #127023
- Remove 5.8.2 ABI compat (#154295 comments 6 and 7).
* Thu Apr 28 2005 Ville Skyttä <ville.skytta at iki.fi> - 3:5.8.6-10
- Apply fixes for CAN-2004-0452, CAN-2005-0155 and CAN-2005-0156 (#156128).
perl-SGMLSpm-1.03ii-16
----------------------
* Sat Apr 30 2005 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.03ii-15
- Specfile cleanup. (#156483)
policycoreutils-1.23.9-1
------------------------
* Mon May 16 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.9-1
- Update to match NSA
* Updated audit2why for sepol_ prefixes on Flask types to
avoid namespace collision with libselinux, and to
include <selinux/selinux.h> now.
* Fri May 13 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.8-1
- Fix fixfiles to accept -f
- Update to match NSA
* Added audit2why utility.
rhpl-0.164-1
------------
* Mon May 16 2005 Chris Lumens <clumens(a)redhat.com> 0.164-1
- Remove directory name from dvorak so it'll show up in anaconda's
lists (#157763, #157840).
* Mon May 16 2005 Chris Lumens <clumens(a)redhat.com> 0.163-1
- Change resolution sorting to match X's behavior (Jef Spaleta, #157596).
- Don't pad IP address information with unnecessary zeros (#157657).
selinux-policy-strict-1.23.16-1
-------------------------------
* Mon May 16 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.16-1
- Update from NSA
* Added rdisc policy from Russell Coker.
* Merged minor fix to named policy by Petre Rodan.
* Merged minor fixes to policy from Russell Coker for kudzu,
named, screen, setfiles, telnet, and xdm.
* Merged minor fix to Makefile from Russell Coker.
* Thu May 12 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.15-5
- Remove incorrect user_*_t from te files
- Add secadmfile attribute
- Allow secadm to relabel secadmfile
- Add wine file_context
* Wed May 11 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.15-4
- Allow smbd to communicate with cups
- fix some net_conf contexts
- Add a bunch of / files file_context
selinux-policy-targeted-1.23.16-1
---------------------------------
* Mon May 16 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.16-1
- Update from NSA
* Added rdisc policy from Russell Coker.
* Merged minor fix to named policy by Petre Rodan.
* Merged minor fixes to policy from Russell Coker for kudzu,
named, screen, setfiles, telnet, and xdm.
* Merged minor fix to Makefile from Russell Coker.
* Thu May 12 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.15-5
- Remove incorrect user_*_t from te files
- Add secadmfile attribute
- Allow secadm to relabel secadmfile
- Add wine file_context
* Wed May 11 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.15-4
- Allow smbd to communicate with cups
- fix some net_conf contexts
- Add a bunch of / files file_context
system-config-printer-0.6.131-1
-------------------------------
* Sun May 15 2005 Tim Waugh <twaugh(a)redhat.com> 0.6.131-1
- 0.6.131:
- Fixes for page margins (bug #134260).
xchat-1:2.4.3-3
---------------
* Sun May 15 2005 Warren Togami <wtogami(a)redhat.com> 1:2.4.3-3
- Prevent interception of down arrow during Input Method (#144588 tagoh)
18 years, 11 months
"use register arguments" option enabled.
by Mike Honeyfield
I am just wondering the reasoning behind having the experimental
option "Use register arguments" on in the kernel config.
It has caused some issues for me, have since fixed it, but was
wondering why an experimental feature that could/can break the ABI for
3rd party binary only modules would be enabled?
I have noted this on FC2/3, not yet looked at FC4test and also RHEL4.
Thanks in advance.
Mike
18 years, 11 months
SE Linux installer changes needed - was Re: /etc/ld.so.cache and FC4T3
by Russell Coker
On Saturday 14 May 2005 02:46, Russell Coker <russell(a)coker.com.au> wrote:
> I am seeing /etc/ld.so.cache getting type etc_t for an initial install of
> FC4T3. Is anyone else seeing this?
>
> At this stage I'm not sure whether I messed up my install process or
> whether it's a more general thing.
I've found the problem.
The domain anaconda_t seems to be unused (we should probably just delete
anaconda.te). The installation process runs all initial programs from an
initrd (gzip compressed cpio file). cpio has no support for SE Linux labels
so no domain transitions occur and everything runs in kernel_t. Everything
that's not in an initrd is in a cramfs file system (which also has no support
for SE Linux labelling). This means that created files get the type of the
directory - etc_t in the case of /etc/ld.so.cache.
One possible method of dealing with this would be the following:
domain_auto_trans(kernel_t, ldconfig_exec_t, ldconfig_t)
The other option is to run restorecon at the end of the install. Both options
are ugly hacks.
Given that we aren't doing anything with SE Linux at the install the best
option is probably to create a policy that defines all file types with a
single domain that can have read/write access to them, this will save space
in the stage2 files and also precious RAM (currently installing to a machine
with 64M of RAM is almost impossible, and 4176K of that problem is the SE
Linux policy).
I've attached a little Perl script that will munge a targeted policy. It
replaces most type and domain definitions with typealias rules and reduces
the policy binary size from 4176K to 60K. That saves 4116K of kernel memory
and almost 700K on the cramfs. The saving of 4M of kernel memory will make a
huge difference to the install on small machines. Currently it's almost
impossible to install a FC4 test version on a machine with 64M of RAM, this
change will give the same result as adding another 4M of RAM to machines for
the installer (particularly important for machines that run out of RAM before
completing the partitioning process).
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
18 years, 11 months
Kernel panic during boot with latest rawhide kernel
by James Morris
I'm getting this with kernel-smp-2.6.11-1.1312_FC4, system fully updated
to rawhide:
Linux version 2.6.11-1.1312_FC4smp (bhcompile(a)decompose.build.redhat.com) (gcc version 4.0.0 20050512 (Red Hat 4.0.0-5)) #1 SMP Sat May 14 16:33:46 EDT 2005
BIOS-provided physical RAM map:
BIOS-e820: 0000000000000000 - 00000000000a0000 (usable)
BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)
BIOS-e820: 0000000000100000 - 000000003ff75000 (usable)
BIOS-e820: 000000003ff75000 - 000000003ff77000 (ACPI NVS)
BIOS-e820: 000000003ff77000 - 000000003ff98000 (ACPI data)
BIOS-e820: 000000003ff98000 - 0000000040000000 (reserved)
BIOS-e820: 00000000fec00000 - 00000000fec90000 (reserved)
BIOS-e820: 00000000fee00000 - 00000000fee10000 (reserved)
BIOS-e820: 00000000ffb00000 - 0000000100000000 (reserved)
127MB HIGHMEM available.
896MB LOWMEM available.
found SMP MP-table at 000fe710
Using x86 segment limits to approximate NX protection
DMI 2.3 present.
Using APIC driver default
ACPI: PM-Timer IO Port: 0x808
ACPI: LAPIC (acpi_id[0x01] lapic_id[0x00] enabled)
Processor #0 15:2 APIC version 20
ACPI: LAPIC (acpi_id[0x02] lapic_id[0x02] enabled)
Processor #2 15:2 APIC version 20
ACPI: LAPIC (acpi_id[0x03] lapic_id[0x01] enabled)
Processor #1 15:2 APIC version 20
ACPI: LAPIC (acpi_id[0x04] lapic_id[0x03] enabled)
Processor #3 15:2 APIC version 20
ACPI: IOAPIC (id[0x04] address[0xfec00000] gsi_base[0])
IOAPIC[0]: apic_id 4, version 32, address 0xfec00000, GSI 0-23
ACPI: IOAPIC (id[0x05] address[0xfec80000] gsi_base[24])
IOAPIC[1]: apic_id 5, version 32, address 0xfec80000, GSI 24-47
ACPI: IOAPIC (id[0x06] address[0xfec80800] gsi_base[48])
IOAPIC[2]: apic_id 6, version 32, address 0xfec80800, GSI 48-71
ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
Enabling APIC mode: Flat. Using 3 I/O APICs
Using ACPI (MADT) for SMP configuration information
Allocating PCI resources starting at 40000000 (gap: 40000000:bec00000)
Built 1 zonelists
Kernel command line: ro root=LABEL=/1 console=tty1 console=ttyS0,115200 selinux=1
Initializing CPU#0
CPU 0 irqstacks, hard=c042c000 soft=c040c000
PID hash table entries: 4096 (order: 12, 65536 bytes)
Detected 1994.223 MHz processor.
Using pmtmr for high-res timesource
Console: colour VGA+ 80x25
Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
Memory: 1032276k/1048020k available (2086k kernel code, 14900k reserved, 776k data, 232k init, 130516k highmem)
Checking if this processor honours the WP bit even in supervisor mode... Ok.
Security Framework v1.0.0 initialized
SELinux: Initializing.
SELinux: Starting in permissive mode
selinux_register_security: Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 512
CPU: Trace cache: 12K uops, L1 D cache: 8K
CPU: L2 cache: 512K
CPU: Physical Processor ID: 0
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#0.
CPU0: Intel P4/Xeon Extended MCE MSRs (12) available
CPU0: Thermal monitoring enabled
Enabling fast FPU save and restore... done.
Enabling unmasked SIMD FPU exception support... done.
Checking 'hlt' instruction... OK.
CPU0: Intel(R) Xeon(TM) CPU 2.00GHz stepping 07
Booting processor 1/1 eip 3000
CPU 1 irqstacks, hard=c042d000 soft=c040d000
Initializing CPU#1
CPU: Trace cache: 12K uops, L1 D cache: 8K
CPU: L2 cache: 512K
CPU: Physical Processor ID: 0
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#1.
CPU1: Intel P4/Xeon Extended MCE MSRs (12) available
CPU1: Thermal monitoring enabled
CPU1: Intel(R) Xeon(TM) CPU 2.00GHz stepping 07
Booting processor 2/2 eip 3000
CPU 2 irqstacks, hard=c042e000 soft=c040e000
Initializing CPU#2
CPU: Trace cache: 12K uops, L1 D cache: 8K
CPU: L2 cache: 512K
CPU: Physical Processor ID: 3
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#2.
CPU2: Intel P4/Xeon Extended MCE MSRs (12) available
CPU2: Thermal monitoring enabled
CPU2: Intel(R) Xeon(TM) CPU 2.00GHz stepping 07
Booting processor 3/3 eip 3000
CPU 3 irqstacks, hard=c042f000 soft=c040f000
Initializing CPU#3
CPU: Trace cache: 12K uops, L1 D cache: 8K
CPU: L2 cache: 512K
CPU: Physical Processor ID: 3
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#3.
CPU3: Intel P4/Xeon Extended MCE MSRs (12) available
CPU3: Thermal monitoring enabled
CPU3: Intel(R) Xeon(TM) CPU 2.00GHz stepping 07
Total of 4 processors activated (15884.28 BogoMIPS).
ENABLING IO-APIC IRQs
..TIMER: vector=0x31 pin1=2 pin2=-1
checking TSC synchronization across 4 CPUs: passed.
softlockup thread 0 started up.
softlockup thread 1 started up.
softlockup thread 2 started up.
Brought up 4 CPUs
softlockup thread 3 started up.
checking if image is initramfs... it is
Freeing initrd memory: 1068k freed
NET: Registered protocol family 16
PCI: PCI BIOS revision 2.10 entry at 0xfbdf9, last bus=5
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
ACPI: Subsystem revision 20050309
ACPI: Interpreter enabled
ACPI: Using IOAPIC for interrupt routing
ACPI: PCI Root Bridge [PCI0] (0000:00)
PCI: Probing PCI hardware (bus 00)
PCI: Ignoring BAR0-3 of IDE controller 0000:00:1f.1
PCI: Transparent bridge - 0000:00:1e.0
ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 7 9 10 *11 12 15)
ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 6 7 9 10 *11 12 15)
ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 5 6 7 *9 10 11 12 15)
ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 5 6 7 9 *10 11 12 15)
ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 5 6 7 9 10 11 12 15) *0, disabled.
ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 5 6 7 9 10 *11 12 15)
ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 5 6 7 9 10 11 12 15) *0, disabled.
ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 5 6 7 9 10 *11 12 15)
Linux Plug and Play Support v0.97 (c) Adam Belay
pnp: PnP ACPI init
pnp: PnP ACPI: found 11 devices
usbcore: registered new driver usbfs
usbcore: registered new driver hub
PCI: Using ACPI for IRQ routing
PCI: If a device doesn't work, try "pci=routeirq". If it helps, post a report
pnp: 00:0a: ioport range 0x800-0x85f could not be reserved
pnp: 00:0a: ioport range 0xc00-0xc7f has been reserved
pnp: 00:0a: ioport range 0x860-0x8ff could not be reserved
Simple Boot Flag value 0x87 read from CMOS RAM was invalid
Simple Boot Flag at 0x7a set to 0x1
apm: BIOS version 1.2 Flags 0x03 (Driver version 1.16ac)
apm: disabled - APM is not SMP safe.
audit: initializing netlink socket (disabled)
audit(1116354771.207:0): initialized
highmem bounce pool size: 64 pages
Total HugeTLB memory allocated, 0
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
SELinux: Registering netfilter hooks
Initializing Cryptographic API
ksign: Installing public key data
Loading keyring
- Added public key 84EB29B9E4457CD
- User ID: Red Hat, Inc. (Kernel Module GPG key)
pci_hotplug: PCI Hot Plug PCI Core version: 0.5
isapnp: Scanning for PnP cards...
isapnp: No Plug & Play device found
Real Time Clock Driver v1.12
Linux agpgart interface v0.101 (c) Dave Jones
agpgart: Detected an Intel E7505 Chipset.
agpgart: AGP aperture is 128M @ 0xe8000000
PNP: PS/2 controller doesn't have KBD irq; using default 0x1
PNP: PS/2 Controller [PNP0f13:MOU] at 0x60,0x64 irq 1,12
serio: i8042 AUX port at 0x60,0x64 irq 12
serio: i8042 KBD port at 0x60,0x64 irq 1
Serial: 8250/16550 driver $Revision: 1.90 $ 76 ports, IRQ sharing enabled
ÿttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
RAMDISK driver initialized: 16 RAM disks of 16384K size 1024 blocksize
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
ICH4: IDE controller at PCI slot 0000:00:1f.1
PCI: Enabling device 0000:00:1f.1 (0005 -> 0007)
ACPI: PCI Interrupt 0000:00:1f.1[A] -> GSI 18 (level, low) -> IRQ 169
ICH4: chipset revision 1
ICH4: not 100% native mode: will probe irqs later
ide0: BM-DMA at 0xffa0-0xffa7, BIOS settings: hda:DMA, hdb:pio
ide1: BM-DMA at 0xffa8-0xffaf, BIOS settings: hdc:DMA, hdd:pio
hda: Maxtor 6E040L0, ATA DISK drive
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
hdc: HL-DT-ST GCE-8481B, ATAPI CD/DVD-ROM drive
ide1 at 0x170-0x177,0x376 on irq 15
hda: max request size: 128KiB
hda: 80293248 sectors (41110 MB) w/2048KiB Cache, CHS=65535/16/63, UDMA(100)
hda: cache flushes supported
hda: hda1 hda2 hda3 hda4 < hda5 hda6 >
hdc: ATAPI 40X CD-ROM CD-R/RW drive, 2048kB Cache, UDMA(33)
Uniform CD-ROM driver Revision: 3.20
ide-floppy driver 0.99.newide
usbcore: registered new driver hiddev
usbcore: registered new driver usbhid
drivers/usb/input/hid-core.c: v2.01:USB HID core driver
mice: PS/2 mouse device common for all mice
md: md driver 0.90.1 MAX_MD_DEVS=256, MD_SB_DISKS=27
NET: Registered protocol family 2
IP: routing cache hash table of 4096 buckets, 64Kbytes
TCP established hash table entries: 262144 (order: 10, 4194304 bytes)
TCP bind hash table entries: 65536 (order: 7, 786432 bytes)
TCP: Hash tables configured (established 262144 bind 65536)
Initializing IPsec netlink socket
NET: Registered protocol family 1
NET: Registered protocol family 17
ACPI wakeup devices:
VBTN PCI0 USB0 USB1 USB2 PCI1 PCI2 PCI3 PCI4 MOU
ACPI: (supports S0 S1 S3 S4 S5)
Freeing unused kernel memory: 232k freed
Red Hat nash version 4.2.14 starting
Mounted /proc filesystem
Mounting sysfs
Creating /dev
Starting udev
Loading jbd.ko module
Loading ext3.ko module
Creating root device
input: ImPS/2 Generic Wheel Mouse on isa0060/serio1
Mounting root filesystem
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
Kernel panic - not syncing: Attempted to kill init!
[<c01211b8>] panic+0x45/0x1e8
[<c01223e1>] profile_task_exit+0x31/0x45
[<c0124207>] do_exit+0x25a/0x369
[<c0157835>] do_munmap+0xca/0xf7
[<c012436b>] do_group_exit+0x29/0x90
[<c0104025>] syscall_call+0x7/0xb
18 years, 11 months
pam_ccreds and Fedora
by W. Michael Petullo
I have been using Fedora Core's pam_ccreds package to allow my laptop to
authenticate users even when it is disconnected from my network's LDAP
server[1]. Recently, logging in to my computer when disconnected began to
fail.
It seems that I was incorrectly relying on nscd to cache information for
long periods of time. Bug 150748 fixed nscd, but made it difficult to
abuse it in the way I require.
After doing some research, I found nss_updatedb, a utility that maintains
a local cache of network directory user and group information. However,
nss_updatedb is not included in Fedora Core.
What is the preferred way to use pam_ccreds on Fedora? Is anyone else
using this PAM module? Is nss_updatedb a prerequisite and, if so, will it
be packaged for Fedora?
I think disconnected authentication is an important feature for Fedora and
would like to help work on it.
[1] See the thread that starts at:
http://www.redhat.com/archives/fedora-devel-list/2004-May/msg00368.html
--
Mike
18 years, 11 months